This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
File:                     Alr-kZVIIEnyUJPriYEVxr03FEg.mft (raw, json)
Hash identifier:          vddSsA6+dbrGTuOh+wylkqxmhUM9H3n3e33Q0vb0Ldc=
Subject key identifier:   30:F6:7D:3E:60:E4:C7:FE:33:38:C0:33:E7:6A:15:DA:03:0A:12:EC
Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
Certificate issuer:       /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448
Certificate serial:       02EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
Manifest number:          02E9
Signing time:             Thu 04 Dec 2025 23:39:08 +0000
Manifest this update:     Thu 04 Dec 2025 23:39:07 +0000
Manifest next update:     Thu 11 Dec 2025 23:39:07 +0000
Files and hashes:         1: Alr-kZVIIEnyUJPriYEVxr03FEg.crl (hash: fC4Ck/mlHj8/h64X8NBKhHzw2t04CGhLNsa0/SHrk10=)
                          2: 5CE70ACC074E11ED99CF6642C4F9AE02.roa (hash: 2ErCU/J+DpquU4qqc3TwXCkDxCXKfSH2bvg7aekBShk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
                          rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Dec 2025 23:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA044, serialNumber=025AFE9195482049F25093EB898115C6BD371448
        Validity
            Not Before: Dec  4 23:39:07 2025 GMT
            Not After : Dec 11 23:39:07 2025 GMT
        Subject: CN=69321b9b-6d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:ac:ae:fa:e3:0c:cc:5a:c9:cb:4b:d4:cd:
                    61:9b:3a:df:df:01:ab:61:e4:31:24:07:9d:0a:83:
                    84:5e:ac:f8:64:37:4b:fd:05:84:fa:08:de:e9:ed:
                    5f:40:85:71:12:b4:0b:23:de:b5:b7:04:91:b6:75:
                    c1:5c:ff:fe:e6:2b:30:1f:8d:b9:65:3b:a3:e4:8b:
                    cf:05:52:b3:1d:35:68:c0:07:fa:f3:15:8a:a7:50:
                    85:db:ec:5b:a1:8b:e6:e6:97:29:10:b5:08:e9:23:
                    b1:41:60:5a:8f:b8:d9:a5:fd:27:71:41:f7:d0:15:
                    32:2b:cf:d5:39:11:10:1d:38:44:09:87:2b:18:0c:
                    c2:95:d2:38:0c:5b:41:77:a9:28:4a:fa:7c:62:4c:
                    b8:8f:8d:98:df:49:b9:a5:96:bf:89:dc:d6:03:f6:
                    6c:94:fe:de:56:08:4b:bb:0f:c3:c2:27:66:62:36:
                    a9:48:6b:c0:b1:c2:d1:4f:89:a8:5b:cf:29:7d:9c:
                    12:d6:19:86:90:61:e9:59:cd:ec:3a:32:a0:74:7d:
                    6d:c3:b8:00:1c:5e:68:89:88:c3:30:bb:c9:ab:b1:
                    89:b9:c0:48:65:5a:b7:21:57:bb:b8:02:a6:3b:00:
                    f8:23:f8:80:cd:d3:96:c2:9e:d9:fc:06:d7:98:55:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F6:7D:3E:60:E4:C7:FE:33:38:C0:33:E7:6A:15:DA:03:0A:12:EC
            X509v3 Authority Key Identifier:
                keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:08:a7:e4:42:a1:e8:fc:88:0a:7f:c1:d1:5f:70:98:40:16:
         e5:ce:58:ca:70:3e:57:eb:93:b9:d8:22:52:c8:81:ca:61:0d:
         fc:2a:24:5e:47:7d:4d:3f:dc:d6:e2:3a:5b:f0:b8:05:c7:ad:
         11:9a:dc:94:51:e7:14:c3:ab:55:91:81:b2:26:ef:ed:63:15:
         01:b1:be:04:46:e8:52:8b:a7:e5:5c:c9:de:e5:2f:e0:5f:57:
         c2:78:fd:e4:1e:cb:44:92:7d:a9:14:bb:57:02:bb:15:9b:78:
         d0:bd:24:51:0c:ef:aa:cb:3d:f4:84:a4:a5:1a:03:ee:d0:33:
         05:89:e1:37:d7:ea:73:a5:4a:f0:8d:5f:a0:96:1e:9e:62:a8:
         31:f9:f9:5d:f9:a0:77:73:e7:24:19:81:1c:64:dc:f2:cb:b3:
         88:ed:f9:44:a1:8a:b8:55:3a:70:59:eb:60:4f:aa:dc:95:5f:
         65:40:ff:ca:c1:69:8e:ed:8a:3d:32:6f:c3:a4:d5:62:9f:e7:
         14:8f:28:c5:1d:73:1b:c8:a1:fb:7a:ba:21:89:16:a8:e1:93:
         9f:3c:73:24:a2:69:6f:b1:ac:1f:12:d1:4b:32:3c:49:60:af:
         61:94:1c:58:a0:71:d1:17:f4:db:4f:30:c0:bf:dd:33:f3:85:
         9c:8b:f0:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkEwNDQxMTAvBgNVBAUTKDAyNUFGRTkxOTU0ODIwNDlGMjUwOTNFQjg5ODExNUM2
QkQzNzE0NDgwHhcNMjUxMjA0MjMzOTA3WhcNMjUxMjExMjMzOTA3WjAYMRYwFAYD
VQQDEw02OTMyMWI5Yi02ZDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApmqsrvrjDMxayctL1M1hmzrf3wGrYeQxJAedCoOEXqz4ZDdL/QWE+gje6e1f
QIVxErQLI961twSRtnXBXP/+5iswH425ZTuj5IvPBVKzHTVowAf68xWKp1CF2+xb
oYvm5pcpELUI6SOxQWBaj7jZpf0ncUH30BUyK8/VOREQHThECYcrGAzCldI4DFtB
d6koSvp8Yky4j42Y30m5pZa/idzWA/ZslP7eVghLuw/DwidmYjapSGvAscLRT4mo
W88pfZwS1hmGkGHpWc3sOjKgdH1tw7gAHF5oiYjDMLvJq7GJucBIZVq3IVe7uAKm
OwD4I/iAzdOWwp7Z/AbXmFXbqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDD2fT5g
5Mf+MzjAM+dqFdoDChLsMB8GA1UdIwQYMBaAFAJa/pGVSCBJ8lCT64mBFca9NxRI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTA0NC9BN0M3RTY1QTA3
NEExMUVEOTBBMzU0MTRDNEY5QUUwMi9BbHIta1pWSUlFbnlVSlByaVlFVnhyMDNG
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Fsci1rWlZJSUVueVVKUHJpWUVWeHIwM0ZFZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTA0NC9BN0M3RTY1QTA3NEExMUVEOTBBMzU0MTRDNEY5QUUwMi9BbHIta1pWSUlF
bnlVSlByaVlFVnhyMDNGRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJCKfkQqHo/IgKf8HRX3CYQBblzljKcD5X65O52CJSyIHKYQ38KiRe
R31NP9zW4jpb8LgFx60RmtyUUecUw6tVkYGyJu/tYxUBsb4ERuhSi6flXMne5S/g
X1fCeP3kHstEkn2pFLtXArsVm3jQvSRRDO+qyz30hKSlGgPu0DMFieE31+pzpUrw
jV+glh6eYqgx+fld+aB3c+ckGYEcZNzyy7OI7flEoYq4VTpwWetgT6rclV9lQP/K
wWmO7Yo9Mm/DpNVin+cUjyjFHXMbyKH7erohiRao4ZOfPHMkomlvsawfEtFLMjxJ
YK9hlBxYoHHRF/TbTzDAv90z84Wci/Al
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:52:10 2025 by rpki-client